Tavve zoneranger User Manual page 182

Log Level
None
Short
Full
This Traffic log can be downloaded by the downloadFile command on a Ranger Gateway.
The log file is called /log/traffic.log . The log file may also be viewed on the View >
Service Logs page.
The Traffic measurement interval defines how frequently the ZoneRanger will check if any
thresholds are exceeded.. The traffic rate is evaluated within this interval. Traffic will be
counted and logged (if logging is enabled) even if thresholds are not configured to be checked.
The minimum traffic measurement interval is 60 seconds.
The traffic rate is calculated for each one second interval and the highest rate is saved and used
to compare with the configured thresholds. As an example, if the SNMP threshold is configured
for 100 requests/sec and the interval is 5 minutes, if a burst of 105 requests occurs during one
second and even if no other requests are received within the 5 minute interval, the maximum
one second traffic rate is 105 requests/sec which exceeds the threshold.
Received and proxied traffic is measured for both managed and unmanaged IP addresses. Also,
traffic is counted even if it does not pass a configured forwarding rule.
Configuring Received Traffic
The Configuration > Traffic page Received Traffic tab is used to enable threshold monitoring
by traffic type or IP address, set threshold values by traffic type and IP address, and whether or
not to send an SNMP trap if a configured threshold is exceeded for traffic received by the
ZoneRanger.
ZoneRanger 5.5 User's Guide
Description
Logging is off
Traffic totals are logged each time the
thresholds are checked.
Traffic totals along with counts for each IP
address are included.
182